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^ -g- tf $: Mia 3 > tf 12. - ^ ic ^ -5 :^ ® n ^ A ^ IH^ L/ n > tf 

[0 0 0 1] 

[0 0 0 2] 
[^5l5®^$g] 

finite field) 00^^*^^^$ tiT b> ^ISfr^g^i: 

[0 0 0 3] 
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[0 0 0 4] 

[0 0 0 5] 
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[0 0 0 7] 

^ (Z) s: ^« -r S i: T S o 
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[0 0 0 9] 
[0 0 10] 

[0 0 1 1] 

[0 0 12] 

^151CM/SL, ®l©«3^5^-^|&^#m3tt, ®4®^3^^-^^^Jg^l 7 
[0 0 13] 
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[0 0 14] 
[0 0 15] 

ZlillC^St, H2 7?ffiV>e>tlTV^S^m^*tli. GF (11) ilia^tlS (m = 

1) „ m=l<Dmmmi> mi^ (prime field ) ii%mtm>. 
[0 0 16] 

mod p = 2^^ mod 1 1 = 5 -e$>S#'^$:#X.'5o mod p p $r 

^il-tSiH^limSr^b, g^^y mod pli. GF (11) ICfe WS^IS^*:?^ 

[0 0 17] 

ZlOi:^. rt-ifAli, g'^mod p = 2^mod 1 1 = 5 $:rL— !f B 
33I#L. iL-ifBli. g^mod p = 2^mod 1 1 = 9 ?:rL-1f AlC^-ft 
•r&o r^klC, rL--tfAtt, rL--»f B*>^^#bfcg^ mo d p = 9$:flgv>T, 

s = (g^ ) = 9^ = 5 (mod p) (1) 
rL-ifBtt. ZL-if AA^^^MLit g^ mo d p=5S:MvnT, 
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s=(g^)y=5^=5 (mod p) (2) 
mod i^^MmLtcthX^. :ltle>a)'K#*^^x y &^«?)&:ii:ttS«)T 

xm^^xm^mm^no^ufs^x^^. 

[0 0 18] 

®3li, Diffie-Hellman<^)|t5C^^CfcV^T. ^^#:G F (2) = {0, 

1) <Dmm io^t^iti} ^^mtt^ sikmm0^m^^m\'^xm^nsmmi^ 

GF (2^) $:MV^fcM?:^bTV^So 31©^^. OF (2^) li, OF (2) 

(Dmm^^miL-t^mti'^^j^^ may 2ikPAr(D^m.^t:mmhivxn':>. 

[0 0 19] 

Zl^T'li, P = 2, 3?j?C®6^#^^f (x) =x^+x+l, g = x mod 
f (x) Hi^^m^tiXi^*). rL-if ACOM^^AU =4T$)»J, rL-ifB<D 

= 6T'S>y, ^^&-r^^S5^^#*^s = g*j mod f (x) -e 

&S^^^#;tS„ mod f (x) f (x) 

mod f (x) tt, GF (2^) izisi-f ^mmi)^mm.(D-'m^ 

[0 0 2 0] 

rL-ifAli, g* mod f (x) =x^ mod (x^ +x+l 
) =x2 +xS:rL--if BIC^#L, rL-ifBtt, g^ mod f (x) =x^ m 
od (x^ + X+1) =x2 + 1 5:rL— tf AC3lMi-<5u r^tc, rL-ifAti, 
n-if B7&^e,^>fgLit g j mod f (x) =x2 + 1 $:ffiv%T. ?j?C^lCj;y^^ 
^Mlt^s So 

s=(gj)^ = {x2+l)'*=x+l (mod f(x)) (3) 
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^L— IfBli, rL-if A*>^^#b:tg* mod f (x) +x$: 
s= (gi ) j = (x^ +x) ^ =x+l (mod f (x) ) (4) 

*^MV^e>tl^e m:«)^+^lC:^^J-tti«, fci:;lS3#A^g* mod f M t 
gj mod f (x) ^JUni^t^^lyX^. rtie>®##*^e> i i: j 

<Z)«# h b T ffl T BiP#®# fr -5 r i: A^T' ^ S „ 

[0 0 2 1] 

lij&ej-r. ^rs#:gf (2*") sr^m^-sfcfeicii. mizJkm.mil mi^(Dmm0^ 

[0 0 2 2] 

-So 

[0 0 2 3] 
[0 0 24] 
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[0 0 2 5] 

•rsm-^^cffiv^e>n, ^i&T^-^^fg^-r^^f :7ai-:;^ 1 3 a. rL— ^f;()^^3^5^- 
^ (Z)tts©/^°^ - ^ s: & ^li^-re^^tcM v^ e>*i-&o 

[0 0 2 6] 

3& CD e> *^ Sr^SE-r S <, 
[0 0 2 7] 

[0 0 2 8] 

2feJ:tJt#g&7=-^#i^>r>^ ^'ai-X 1 3 1CJ:U, if-^ei®^- KA^^^Stl 
[0 0 2 9] 
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{sEmti^^i)^) %:^3L^y^~rS (y.^^zfSZ) „ ^LX. -^tl 
[0 0 3 0] 

) , mm^mT-r^. 

[0 0 3 1 ] 
[0 0 3 2] 

XT^y^s nz^\^x^m=^- i^fimm^tif^m^. mm^r-^mu^i eii 

[0 0 3 3] 
[0 0 34] 
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[0 0 3 5] 

me it. mmpizmt^^mzm^\f^xm^GF (p) (DmmT'-^^^m-t 
^^~-$i^mmm(Dm^mr'$>^. mi^cF (p) (omm^^-^ nvnt. mm 

P S:^^•rtl^^J;V^„ :r.<Dmvlt. mm. (characteristic) ti^mtti^. 
[0 0 3 6] 

, ^Kr^^'-i^Jg^-f >^:7x-x 1 3, miS[^2i, 7^-:;r;i/#M^2 2, M 

^*g|S2 3, mfSCW^a52 4, 2 5, cttJ^^fltf&M^ 2 6 
[0 0 3 7] 

\z^^mmmziB\i^x\%. n = 2. 3, 4. . . . iz^m-^^mm^, 7, 11 
, . . . i^m\z^m-^nx\^^. 

[0 0 3 8] 

5"-:/;i/#m^2 2, nmrn^m^z. i5^x:^mmn-M.m2.A\-$.^ m4.<Dmm 

^-9^m.mi^\zM^-t^. 7^--^;v#M^2 2tt, ^X^tlf:i\^vV^n^ 
ntcMuS:-rs^t5c*^^tS:*2 l^c#^^b^v^i:^, SLi!t|g^^ 2 3 tt, if 
[0 0 3 9] 

mmm'&m2^\t. ®4®^3^5=^-^f^iiE^i ec^r^b, ri— tf;?,^fi^L^ 

^i5CP*^:*:^lc^i!CT'^S7b>^*>S:W^"r€>o ^iSC^^^J^ 2 6 04(7)^3^7^ 
-^^^ig^l 7{cmL, ^x.^ti7t^tJ[p$r^3^5^-3r^bT^^-t<So 
[0 0 4 0] 
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y^-y^-T. 1 3 $::^bT^ti5:A:^Jt-So 
[004 1] 

tf^y h;R®#A:^J$:M*bT (X^^^y >^S 1 3 ) , x^^^y 1 2Jgil 
[0 0 4 2] 

etc^^b (x^^y>^si 6) , mm^^yr^. 

[0 0 4 3] 

vzfs 1 6) , jim-^myt^. 

[0 0 4 4] 

^l!f^»I^^B5 2 4 ICcfcS^mW^ (primality test) ® T^l/^T U XA i: tt, 

(fefefc *^-r^) ^m, ' -^n^mM-m ' WiW . ^^^fk, pp. 

130-143, 1995. 
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:$CWi. [2] : IEEE P1363 Annex A/Editorial Contribution, "Standard Specif i 
cations For Public Key Cryptography " , pp. 78-81, 1998. 

XT^^y-^^s 1 itcfcvxT#i&^-K*^^«^$tifc^-^, mmm^m2 bit. m 

[0 0 4 5] 

mm^mm2 Gizm&h (x5^^i/>^si 6) , mm^mr-t&. ^fc. ^tmy^m 

[0 0 4 6] 

\>^xm^GF (p) ±<Dmmii\>i^m-^no. ^®<te)*i«i^icj:ti«, =L-^iji 

[0 0 4 7] 

H9ii, m±^m.m{zm^\f^xmmi!^GF (2'") <z)^3^^-^$:^^-re7= 
-^f^^^a®^^07?&s„ mma^GF (2") ©m-^, ^gtptt2icsfc«?)e> 

F (x) S:|g^-rtilii:v>„ mr^CD^^^tt, Mx.«, =S-^x^ (k = 0, 1, 

. . . , m) (D^m. (o^fctti) ©m-iriCcfcy^-riiiA^T'^So 

[0 0 4 8] 

®9®5^-^t^^^gii. Am:^3^gii, ii*^^li^>r >^ v'ai-x 1 2 

, ^t&T^-^jg^-f 1 3, ^m^^m^ms 1, ^->^;i/#mais3 2 

, #^^^^^5 3 3, 3 4 , 3 5. 33 J: rJ^filE^^'^^l&MJ^ 3 6$: 

*IS<!|s?giC^g 1 8*Wv>S^IS^(Z)*3^7=-^$:^^t-So 
[0 0 4 9] 
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S)^nr^mi<^mmiim^x(Dmm^m^F (x) <oMj^m^^w^-t^. m^it 
. mi oizm-tmm^^^^i^^^^xit. m=2, 3, 4, . . . izMj^-r^m 
m^m^nvx. x^+x+i, x^+x + i, x^+x+i, . . . 

[0 0 5 0] 

^~ -i/jvmm^ 3 2 , ^-m^m^m 3 3 . ^ j: nmm^m^^ 3 4 li, e 4 ® 
iiiS:=?r-i:LTe6^#]S^^3 1 Mft-t^t^m^m.^^'mmt^. # 

[0 0 5 1] 

(x) ^r^^^T^-^f i:LTi^Mi-So 
[0 0 5 2] 

■r-5 (:;^.5^^y^S 2 1) „ Siif^- Klcfev^Ttt, :i— tf ttei&^##g^>f >^ 
[0 0 5 3] 

MgHl^(Z)fiS:^^>CtSC*^^*^ 5:^01 ^y^-rs (X5^^y^S2 2) „ ^bX 
^SrlilL. *£:*:riJciS[®llAiJ^:M*LT (X5^^y>^S2 3) , X^^y:/S2 2a 
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[0 0 5 4] 

>y>^s2 4) „ -^(D^v^jtmm^m^ijmm^m^ms iK^^^mt. 

[0 0 5 5] 

i-S (X5^»y:7^s 2 5) -^UT, ®E^tt¥0^SI5 3 4 li, 

^igc3 6K.m^LX iT.'r^yzrs 2 6) , ^aSr^T-TSo 
[0 0 5 6] 

X5^^y 2 1 ^CfeV^T#g&^- BiE^tt^!l^^3 5 tt, 

mJ^M^^3 4 i:I^^lCLT, Ji^$tlfc#^^F (x) (Z)SE*?J14^0^ (irre 
ducibility test ) $:^rfv^ (X5^^y>'"S2 7) , ^t\,i)^^'^\zm^X^^i)^^tl^ 
^^3LV^-tS (X5^^y:;^S 2 8) „ 
[0 0 5 7] 

"thx. m^^nr^^m^F (x) *^^*?;T'^tiii. "tn^mm^'-'Si nvx 

JcOEb (X5^»y:/S2 9) , :;^S 2 7jgii|^<Z)^aS:^Uigt-. 

[0 0 5 8] 

SI 2tt, 01 l(Z)X7^yyS 2 5 lCi3tt<5g6*?J#]®^^^^at3D7n-5^^ 
-hT'feSc t-r. 5"-y;i/#MS3 2l±, #]®^5il^g|J3 3lCjfe;^riJciSrniSrA 
(X7^>y:/S 3 1), 3«, (m+ 1) hf-/ hCDSLtSC (/^>r 

-:hyn-K) (X-t^^j/ :/S 3 2 ) „ 



11-3083296 



11 — 102920 



[0 0 5 9] 

mz, ^m^m^ms Sit. mmi^cF (2) = {o. 1} (Drnm^mmut 

^mrk<D^m^^^^-t^ (Xt^^j/ >''S 3 3) c rzi-^tt, k=l, 2, . . . 
, 111+ 1 ®^tl^n®MtCoV>T, ^^bltSLtJC® ktf>y h S®1it iO^t^itl 

[0 0 6 0] 

S34) , ■^Mmmth^iJ'^^:'^^y^-t^ (x^vy:/s3 5) o mm^m^cD 
3 2ai^®^ai$:i^»jjgL, mmtji0^m^f)'m^titii,t. ^n^mm^m^^m 

eizmiJlyX (.TsT-VZfS 3 6) , ^Ha^r^T-^So 
[0 0 6 1] 

01 i©^atc<fcy, J£:^7i?ci5cmi:®6J^#]fi^F (x) 3 

6K:^^$tl-5il, 1 8 li, ^®7^-^^CSo'V^T^|^i^^:GF (2 

m^ttiitj^mmzmMmm^m^F (x) *^^^$ti-5}fe«?), :3--if*^gE*& 

[0 0 6 2] 

i:36T% ^^^GF (2"") ±(Dmm^mmt-r^:^m(Di^iivx. mm 

^JEM^^ (optimal normal basis) S:MV^S^^*^^^tlTV^-5 (jSCt^ [1] 
, pp. 167-170 /Ificm [2], pp. 19-24) o -|5tC, *IS^G 
F (2" ) it, lEmmm (normal basis) ^r^^^ni: bT^^-TS r A^"??^. 

[0 0 6 3] 
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^2 0 0 0 (Dmi<^xwL(Dot>^mi\:JEmmmi)^^^-t^%mt. &.y(D:scmiz v 

jSCil? [3] : American National Standard, x9.62-199x. Public Key Cryptogra 
phy For The Financial Services Industry: The Elliptic Curve Digital Sign 
ature Algorithm, p,41. Working Draft. 

\:,x^(DmmitsEmmmmmm^m^(Dmmi)^iiM^ti^. mmitsEmmmmm 
m^m^mt. mmitiEmmm^m^^xmm^^mm-t^t^i^izs^mist^^cDm 

[0 0 64] 

0i3«, :r.<D^^rjt'r'-^^^^miz^^mM(oyu~^^- hx$>^. t. 

[0 0 6 5] 

4 2ai^®^a$:^uig-r„ 
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[0 0 6 6] 

ic^^L (x-5^^yys4 6) . mM^mr-t^. 

[0 0 6 7] 

mitiEmmmmmm^i^^F (x) nvx. miz^kmmtn^izmm^^^^m 
^3 6tc^^b (:^^^y^s4 6) , mm^myt^. mmitiEmmmmmm^ 

^^®^^T;i/=JUXAi:LTtt. m^ii. ±7&Lr^:Scm [2] ®3 7/>^-s;{c 

ia« $ tlT V^ -5 J; -5 =fo ® V> e, S „ 
[0 0 6 8] 

':/S 4 8) o 

[0 0 6 9] 

mmitiEmmmmmm^m^it. mx.it. ±^Lr=.:icm C2] ©2o^-s;{c 

[0 0 7 0] 

ijm^ttnt. mz. m^k<Dmm^tiEmmm.mmm0'm^^^^i^x. f (x) 
iEmmmm&^m^m^X';&at.m^-t^o 

[0 0 7 1] 

1 7 BU^^ 11-3083296 
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[0 0 7 2] 

xts^vftnt. ^m'r'-^mM^y^y:^-y^is^i^hxm^^mi.. nm. IE 

[0 0 7 3] 
[0 0 7 4] 

© J: ^ ^fi^ic <fc ti . =L- ■^i)mmitiEmmm & * -r s jfe:^7iJci5t m $ x.ii 
M-rnit. }Mmmizmrk<Dmm^tsEmmm.mmm^m^F (x) 3&^^^$ti-5„ 

tis i: i: t> ic, mmi\LiEMmmzm':5 < mmis^mmii^^mfi^'^m t.tst^. 
i^^mx'&mt. ^L-ifiummitiEmmmm^m^m^F (x) 

[0 0 7 5] 

J^_b®IIJfe?^MtCSV>T«. i^bT, ^tlSft^GF (p) J3<fcUfGF (2") 

p" ) (Dmm'f-'Si^^0^'r^. 

[0 0 7 6] 
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(Dmm^mmmu. cpu i^^^mmmm) 41, ^^y4 2, A:^ja®4 3, 

m*IS®44. ^g|Sia^^g4 5. i^f*i|gi&^tt4 6. hU-'!7l^m 
ag4 7 ^IBx., ^tl^li/^X4 8^CJ:U^LV^^C^^^4^TV^-5„ 
[0 0 7 7] 

>l^U4 2td:, M^li. ROM (read only memory) , RAM (random acces 
s memory) m^^^. mmizm\'^'^tl^':fU^^J^il^-^^^m'r^o CPU 

[0 0 7 8] 

d®^^, E4®ei&^#ji^>r>^ >'ai-x 1 2. ^i&7^-^fg^>r>^7 

ai-Xl3, ^3^7^-^^fig^l 5, feJ:tJf^3S^-^^|I^l 6li, :pI^U4 

4 ii^^T^-^i^MJgei 7tt, ;i^y 4 2 i^ic^ite>tiSo 

[0 0 7 9] 

SS^I^® m :d tc M V ^ e> n S o 

[0 0 8 0] 

(magneto-optical disk) ^g^T^S„ -ff^^S^Slt. 
[0 0 8 1] 

«^f*:|gl&Mfi4 6tt, «riliB^^f*J4 9 S:|gg&b. ^®SB#|^^lCT^-fe;^-r 
<5o orMfa^^fi|£4 9 LTtt, ^^U^iJ-K, -yUvy^-'TA 7.^ . CD-R 
OM (compact disk read only memory ) , %^>C7s^. X 
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[0 0 8 2] 

ItSiU, ^4xe>S:;*^y 4 2 ten - K LT^M-TS Zl 
[0 0 8 3] 

(D'r-^^-T. 5 OtC-eS^^tli/^^Dy^AtT^-^li, 4 2{cn- K$ 

tlSo ^bT, CPU4 1li, ^©^-^ $:mv>T^(D:/n^^^A$:||fTb, 'i^ 

[0 0 8 4] 
[5§^®a^] 

[HI] 
[02] 
[H3] 
[04] 
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[05] 
[06] 
[07] 
[08] 

||2(Z)7=-^^m^S®:7n-^-v- hi?^-5o 

[09] 

^ 3 <D5^- ^ ^^^e®*l^0T'^ So 
[01 0] 

5:5^-r 0T ^ o 

[011] 
[01 2] 
[013] 
[014] 
[01 5] 

1 A:*J#© 
2 

3 ^3^7^-^|&M#^ 

1 1 Am:^J^g 

12 egft^^fi^>r>^:7 3i-x 

2 1 mU^^ 1 1-3083296 
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13 #l&5^-^Ji^>f >^ y'ai-X 
14 

1 5 mm^-'^i^m^ 

16 mm^-'H^^u^ 

1 7 mm^~^mmi^ 

1 8 mmi^mm-mm 

2 1 ^|5t^ 

2 2. 3 2 5^— 

2 3 SLiSC^^aS 

2 4, 2 5 ^lifg^glS 

2 6 mmmmi^ 
3 1 mm^m^m 

3 3 

3 4, 3 5 gE^tt^^^ 

3 6 mm^m^mmi^ 

4 1 CPU 
4 2 :iL=EV 
4 3 A*^g 
4 4 m:^J^g 

4 5 ^mmmmm 

4 6 ^^Icl^i&^g 

4 7 ^yhu-^mmmi 

4 8 Ax 



4 g 
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// 



2 2 
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